Azure / Azure-Network-Security

Resources for improving Customer Experience with Azure Network Security

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Sentinel Playbook - Block IP - New | BadRequest The value cannot be null. The action type 'AppendToArrayVariable' only supports values of types 'Float, Integer, String, Boolean, Object'.

cyb3n3tic opened this issue · comments

Describe the bug
I have deployed Sentinel Playbook - Block IP - New however when the logic app runs it is failing on For Each 4 / Append to array variable 4, generating the BadRequest error below:

BadRequest
The value cannot be null. The action type 'AppendToArrayVariable' only supports values of types 'Float, Integer, String, Boolean, Object'.

The code view for Append to array variable 4 is:

{
  "type": "AppendToArrayVariable",
  "inputs": {
    "name": "MatchValue",
    "value": "@items('For_each_4')?['Address']"
  }
}

Reproduce
Sentinel has a rule configured to run when a block action is matched in Application Gateway WAF which in turn causes this logic app to run.

Expected behavior
I am expecting the IP that was the source of the Block action to be added to the WAF IP block list

Screenshots
image

image

image

I'm at a loss as to how to solve this one, hopefully I am missing the obvious - any suggestions appreciated.

Message that will be displayed on users' first issue